Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Problems Post-Malware Removal


  • Please log in to reply
8 replies to this topic

#1 P00HSTER

P00HSTER

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:58 PM

Posted 09 August 2013 - 08:54 AM

Mod Edit:  Split from http://www.bleepingcomputer.com/forums/t/393642/lost-task-bar-cant-retrieve-it/ - Hamluis.

 

 

Hello, I have been having this same problem I had to reinstall my os in 02/2013 and I don't want to again, I had several things happen like no sound for a while. I didn't know it was related till recently, I noticed that the icon was missing for the volume and went to put it back on and "No audio device" I also have a start button and taskbar but it is bouncy?.I can not use it, it shrinks down to a line "non clickable line" I might add.
I navagate through the task mgr.
I have been running Norton 360 untill recently one I got a "Trojan sscope" I got it removed with McAfee, that is free through my internet provider. I also had hitman pro  so you see I had 3 antivirus programs thought they were uninstalled but found them while doing a clean with ccleaner. so I ran a comodo to remove them I ended up with Kaspersky. I believe that the others antivirus programs are off now. I have a clean pc and there are no malware to be found? so HELP is all I can say I have been toKelly's corner and it isn't working , I have been to windows. I can't install several updates either.
if you would like I have log files I don't know how to get them on here.
Thanks Ken


Edited by hamluis, 09 August 2013 - 12:52 PM.
Split, PM sent new OP, moved from XP to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,082 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:01:58 PM

Posted 09 August 2013 - 03:04 PM

Hello, Lets run these and go on from there.

Please download MiniToolBox, save it to your desktop and run it.
Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.
Note: When using "Reset FF Proxy Settings" option Firefox should be closed.



Please Download TDSSkiller
Launch it.
Click on change parameters-Select TDLFS file system
Click on "Scan".
Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results.



Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
You will be prompted to restart your computer. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.



Last run ESET.
  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
  • Scan potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE:Sometimes if ESET finds no infections it will not create a log.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 P00HSTER

P00HSTER
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:58 PM

Posted 10 August 2013 - 07:16 AM

Hello Boopme,

I did a full Kaspersky scan it found nothing, I have reimage and it found that me hard drive is at 2 megabytes per second so I did this test for the hard drive and it passed. I am now doing the ESET online scanner. downloaded all the others ones you sugested and have them in line, will do others if needed. bbl to let you know what's up thank you so very much. Peace Ken

 

 

--------------- SeaTools for Windows v1.2.0.8 ---------------
8/9/2013 10:32:57 PM
Model: ST380215A
Serial Number: 9RW80RQ3
Firmware Revision: 3.ADA
SMART - Pass 8/9/2013 10:32:57 PM
Identify - Started 8/9/2013 10:33:07 PM
SMART: Supported and enabled
48-bit Address feature set supported: True
Max LBA: 156249999
Host Protected Area features: Supported and enabled
Mandatory Power Management: Supported and enabled
Security Mode: Supported not enabled
SET MAX security extension: Supported not enabled
Advanced Power Managment: Not Supported
Download Firmware: False
SMART self-test supported: True
SMART error logging supported: True
Drive Temperature(C/F): 37/99
Power-On Hours: 14121
Fix All Long - Pass 8/10/2013 7:28:17 AM
 



#4 P00HSTER

P00HSTER
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:58 PM

Posted 10 August 2013 - 01:12 PM

it took some time and I did all the items you suggested, still no changes?  here are the logs:

MiniToolBox by Farbar  Version: 13-07-2013
Ran by Owner (administrator) on 10-08-2013 at 08:30:30
Running from "C:\Documents and Settings\Owner\My Documents\Downloads"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================


127.0.0.1       localhost

========================= IP Configuration: ================================

Broadcom 440x 10/100 Integrated Controller = Johnson (Connected)


# ----------------------------------
# Interface IP Configuration         
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Johnson"

set address name="Johnson" source=dhcp
set dns name="Johnson" source=static addr=156.154.70.22 register=PRIMARY
add dns name="Johnson" addr=156.154.71.22 index=2
set wins name="Johnson" source=dhcp


popd
# End of interface IP configuration




Windows IP Configuration



        Host Name . . . . . . . . . . . . : GINGERMAE

        Primary Dns Suffix  . . . . . . . :

        Node Type . . . . . . . . . . . . : Unknown

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No

        DNS Suffix Search List. . . . . . : tampabay.rr.com



Ethernet adapter Johnson:



        Connection-specific DNS Suffix  . : tampabay.rr.com

        Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller

        Physical Address. . . . . . . . . : 00-14-22-63-A3-57

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 192.168.0.3

        Subnet Mask . . . . . . . . . . . : 255.255.255.0

        IP Address. . . . . . . . . . . . : ?

        Default Gateway . . . . . . . . . : 192.168.0.1

        DHCP Server . . . . . . . . . . . : 192.168.0.1

        DNS Servers . . . . . . . . . . . : 156.154.70.22

                                            156.154.71.22

                                            ?

                                            ?

                                            ?

        Lease Obtained. . . . . . . . . . : Saturday, August 10, 2013 8:22:50 AM

        Lease Expires . . . . . . . . . . : Saturday, August 10, 2013 9:22:50 AM



Tunnel adapter Teredo Tunneling Pseudo-Interface:



        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

        Physical Address. . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF

        Dhcp Enabled. . . . . . . . . . . : No

        IP Address. . . . . . . . . . . . : ?

        Default Gateway . . . . . . . . . :

        NetBIOS over Tcpip. . . . . . . . : Disabled



Tunnel adapter Automatic Tunneling Pseudo-Interface:



        Connection-specific DNS Suffix  . : tampabay.rr.com

        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface

        Physical Address. . . . . . . . . : C0-A8-00-03

        Dhcp Enabled. . . . . . . . . . . : No

        IP Address. . . . . . . . . . . . : ?

        Default Gateway . . . . . . . . . :

        DNS Servers . . . . . . . . . . . : ?

                                            ?

                                            ?

        NetBIOS over Tcpip. . . . . . . . : Disabled

Server:  UnKnown
Address:  156.154.70.22

Name:    google.com.tampabay.rr.com
Address:  92.242.144.10



Pinging google.com [74.125.225.68] with 32 bytes of data:



Reply from 74.125.225.68: bytes=32 time=50ms TTL=45

Reply from 74.125.225.68: bytes=32 time=56ms TTL=45



Ping statistics for 74.125.225.68:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 50ms, Maximum = 56ms, Average = 53ms

Server:  UnKnown
Address:  156.154.70.22

Name:    yahoo.com.tampabay.rr.com
Address:  92.242.144.10



Pinging yahoo.com [98.139.183.24] with 32 bytes of data:



Reply from 98.139.183.24: bytes=32 time=72ms TTL=45

Reply from 98.139.183.24: bytes=32 time=67ms TTL=45



Ping statistics for 98.139.183.24:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 67ms, Maximum = 72ms, Average = 69ms



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=64

Reply from 127.0.0.1: bytes=32 time<1ms TTL=64



Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 14 22 63 a3 57 ...... Broadcom 440x 10/100 Integrated Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1     192.168.0.3      20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1      1
      192.168.0.0    255.255.255.0      192.168.0.3     192.168.0.3      20
      192.168.0.3  255.255.255.255        127.0.0.1       127.0.0.1      20
    192.168.0.255  255.255.255.255      192.168.0.3     192.168.0.3      20
        224.0.0.0        240.0.0.0      192.168.0.3     192.168.0.3      20
  255.255.255.255  255.255.255.255      192.168.0.3     192.168.0.3      1
Default Gateway:       192.168.0.1
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================

Catalog5 01 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\WINDOWS\system32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 04 C:\WINDOWS\system32\nwprovau.dll [142336] (Microsoft Corporation)
Catalog9 01 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 05 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 06 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 14 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 15 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 16 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 17 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 18 C:\WINDOWS\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 19 C:\WINDOWS\system32\rsvpsp.dll [92672] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (08/09/2013 01:18:30 PM) (Source: MsiInstaller) (User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 4 Client Profile -- Error 1704. An installation for Microsoft Fix it 50535 is currently suspended.  You must undo the changes made by that installation to continue.  Do you want to undo those changes?

Error: (08/09/2013 11:46:45 AM) (Source: Application Error) (User: )
Description: Fault bucket 738702451.
The Wep key exchange did not result in a secure connection setup after 802.1x authentication.  The current setting has been marked as failed and the Wireless connection will be disconnected.

Error: (08/09/2013 11:37:25 AM) (Source: Application Error) (User: )
Description: Faulting application svchost.exe, version 5.1.2600.5512, faulting module unknown, version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [svchost.exe!ws!]

Error: (08/09/2013 07:33:52 AM) (Source: Application Error) (User: )
Description: Fault bucket -882161195.
The Wep key exchange did not result in a secure connection setup after 802.1x authentication.  The current setting has been marked as failed and the Wireless connection will be disconnected.

Error: (08/09/2013 07:33:44 AM) (Source: Application Error) (User: )
Description: Faulting application uninstalldt.exe, version 1.0.2.0, faulting module kernel32.dll, version 5.1.2600.6293, fault address 0x00012fd3.
Processing media-specific event for [uninstalldt.exe!ws!]

Error: (08/09/2013 07:12:49 AM) (Source: PerfNet) (User: )
Description: Unable to read Server Queue performance data from the Server service.
No Server Queue performance data will be returned in this sample.
Error code returned is in data DWORD 0, IOSB.Status is DWORD 1 and
the IOSB.Information is DWORD 2.

Error: (08/09/2013 07:12:49 AM) (Source: PerfNet) (User: )
Description: Unable to read performance data from the Server service.
No Server performance data will be returned in this sample.
Error code returned is in data DWORD 0, IOSB.Status is DWORD 1 and
the IOSB.Information is DWORD 2.

Error: (08/09/2013 07:12:48 AM) (Source: PerfNet) (User: )
Description: Unable to read Server Queue performance data from the Server service.
No Server Queue performance data will be returned in this sample.
Error code returned is in data DWORD 0, IOSB.Status is DWORD 1 and
the IOSB.Information is DWORD 2.

Error: (08/09/2013 07:12:48 AM) (Source: PerfNet) (User: )
Description: Unable to read performance data from the Server service.
No Server performance data will be returned in this sample.
Error code returned is in data DWORD 0, IOSB.Status is DWORD 1 and
the IOSB.Information is DWORD 2.

Error: (08/09/2013 06:29:45 AM) (Source: MSDTC) (User: )
Description: Could not start the MS DTC Transaction Manager.


System errors:
=============
Error: (08/10/2013 08:25:39 AM) (Source: Service Control Manager) (User: )
Description: The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error:
%%5

Error: (08/10/2013 08:24:41 AM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error:
%%1056

Error: (08/10/2013 08:23:54 AM) (Source: DCOM) (User: GINGERMAE)
Description: The server {BA126AE5-2166-11D1-B1D0-00805FC1270E} did not register with DCOM within the required timeout.

Error: (08/09/2013 10:31:24 PM) (Source: Service Control Manager) (User: )
Description: The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error:
%%5

Error: (08/09/2013 10:30:20 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error:
%%1056

Error: (08/09/2013 10:29:36 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

Error: (08/09/2013 10:29:27 PM) (Source: DCOM) (User: GINGERMAE)
Description: The server {BA126AD1-2166-11D1-B1D0-00805FC1270E} did not register with DCOM within the required timeout.

Error: (08/09/2013 08:13:52 PM) (Source: Service Control Manager) (User: )
Description: The IPv6 Helper Service service hung on starting.

Error: (08/09/2013 08:06:23 PM) (Source: Service Control Manager) (User: )
Description: The IPv6 Helper Service service hung on starting.

Error: (08/09/2013 06:53:22 PM) (Source: Service Control Manager) (User: )
Description: The IPv6 Helper Service service hung on starting.


Microsoft Office Sessions:
=========================
Error: (08/09/2013 01:18:30 PM) (Source: MsiInstaller)(User: NT AUTHORITY)
Description: Product: Microsoft .NET Framework 4 Client Profile -- Error 1704. An installation for Microsoft Fix it 50535 is currently suspended.  You must undo the changes made by that installation to continue.  Do you want to undo those changes?(NULL)(NULL)(NULL)

Error: (08/09/2013 11:46:45 AM) (Source: Application Error)(User: )
Description: 738702451

Error: (08/09/2013 11:37:25 AM) (Source: Application Error)(User: )
Description: svchost.exe5.1.2600.5512unknown0.0.0.000000000

Error: (08/09/2013 07:33:52 AM) (Source: Application Error)(User: )
Description: -882161195

Error: (08/09/2013 07:33:44 AM) (Source: Application Error)(User: )
Description: uninstalldt.exe1.0.2.0kernel32.dll5.1.2600.629300012fd3

Error: (08/09/2013 07:12:49 AM) (Source: PerfNet)(User: )
Description:

Error: (08/09/2013 07:12:49 AM) (Source: PerfNet)(User: )
Description:

Error: (08/09/2013 07:12:48 AM) (Source: PerfNet)(User: )
Description:

Error: (08/09/2013 07:12:48 AM) (Source: PerfNet)(User: )
Description:

Error: (08/09/2013 06:29:45 AM) (Source: MSDTC)(User: )
Description:


=========================== Installed Programs ============================

ABBYY FineReader 5.0 Sprint Plus (Version: 5.0.0.3262)
Adobe AIR (Version: 3.8.0.820)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Reader XI (11.0.03) (Version: 11.0.03)
Adobe Shockwave Player 12.0 (Version: 12.0.2.122)
Apple Software Update (Version: 2.1.3.127)
Audacity 2.0.3 (Version: 2.0.3)
Broadcom 440x 10/100 Integrated Controller (Version: 3.29)
CCleaner (Version: 4.04)
CCScore (Version: 6.02.1001.0001)
CDBurnerXP (Version: 4.5.1.3868)
Cloud System Booster (Version: 2.1)
Conexant D850 56K V.9x DFVc Modem
CyberPower PowerPanel Personal Edition 1.2.3 (Version: 1.2.3)
Dell Photo AIO Printer 922
Dell System Detect (Version: 3.3.2.1)
ESET Online Scanner v3
ESSCDBK (Version: 6.02.0001.0001)
ESScore (Version: 6.02.1001.0001)
ESSgui (Version: 6.02.1001.0001)
ESSini (Version: 6.02.1001.0001)
ESSPCD (Version: 6.02.1001.0001)
ESSSONIC (Version: 6.2.0001.0001)
ESSTOOLS (Version: 5.00.0000.0004)
essvatgt (Version: 6.02.1001.0001)
Google Chrome (Version: 28.0.1500.95)
Google Update Helper (Version: 1.3.21.153)
Intel® Extreme Graphics Driver
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Kaspersky PURE 3.0 (Version: 13.0.2.558)
kgcbaby (Version: 5.03.0000.0002)
kgcbase (Version: 5.03.0000.0004)
kgchday (Version: 5.03.0000.0002)
kgchlwn (Version: 5.03.0000.0002)
kgcinvt (Version: 5.03.0000.0003)
kgckids (Version: 5.03.0000.0002)
kgcmove (Version: 5.03.0000.0003)
kgcvday (Version: 5.03.0000.0002)
K-Lite Codec Pack 9.9.5 (Full) (Version: 9.9.5)
Kodak EasyShare software
KSU (Version: 632.62.0004.0001)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Download Manager (Version: 1.2.1)
Microsoft Fix it Center (Version: 1.0.0100)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Word 2003 (Version: 11.0.8173.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Works (Version: 08.05.0818)
Mozilla Firefox 22.0 (x86 en-US) (Version: 22.0)
Mozilla Maintenance Service (Version: 23.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
netbrdg (Version: 6.02.1001.0001)
Notifier (Version: 6.02.0001.0001)
OfotoXMI (Version: 6.02.0001.0001)
PCDADDIN (Version: 6.02.0001.0003)
PCDHELP (Version: 6.02.0001.0001)
Picasa 3 (Version: 3.9)
PowerDVD 5.5
QuickTime (Version: 7.74.80.86)
Realtek High Definition Audio Driver (Version: 5.10.0.6873)
Reimage Repair (Version: 1.6.4.2)
Roxio DLA (Version: 5.2.0)
Roxio MyDVD LE (Version: 6.1.6)
Roxio RecordNow Audio (Version: 2.0.4)
Roxio RecordNow Copy (Version: 2.0.4)
Roxio RecordNow Data (Version: 2.0.4)
SeaTools for Windows (Version: 1.2.0.7)
SFR (Version: 6.02.0001.0001)
SHASTA (Version: 6.02.0001.0001)
SKIN0001 (Version: 6.02.1001.0001)
SKINXSDK (Version: 6.02.1001.0001)
SoundMAX (Version: 5.12.01.7000)
SparkTrust PC Cleaner Plus (Version: 3.1.9.0)
staticcr (Version: 5.03.0000.0001)
swMSM (Version: 12.0.0.1)
tooltips (Version: 6.02.0001.0001)
Tweaking.com - Windows Repair (All in One) (Version: 1.9.15)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Windows Internet Explorer 8 (KB2598845) (Version: 1)
Update for Windows XP (KB2467659) (Version: 1)
Update for Windows XP (KB2641690) (Version: 1)
Update for Windows XP (KB898461) (Version: 1)
Update for Windows XP (KB951978) (Version: 1)
Update for Windows XP (KB955759) (Version: 1)
Update for Windows XP (KB968389) (Version: 1)
Update for Windows XP (KB971029) (Version: 1)
Update for Windows XP (KB973687) (Version: 1)
Update for Windows XP (KB973815) (Version: 1)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VPRINTOL (Version: 6.02.0001.0001)
WebFldrs XP (Version: 9.50.7523)
Windows Defender (Version: 1.1.1593.21)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Management Framework Core
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3 (Version: 20080414.031525)
WIRELESS (Version: 6.02.0001.0001)

========================= Memory info: ===================================

Percentage of memory in use: 31%
Total physical RAM: 1534 MB
Available physical RAM: 1055.09 MB
Total Pagefile: 3427.9 MB
Available Pagefile: 3051.63 MB
Total Virtual: 2047.88 MB
Available Virtual: 1970.88 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:74.5 GB) (Free:47.05 GB) NTFS

========================= Users: ========================================

User accounts for \\

Administrator            ASPNET                   Guest                    
HelpAssistant            Owner                    SUPPORT_388945a0         


**** End of log ****
 



#5 P00HSTER

P00HSTER
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:58 PM

Posted 10 August 2013 - 01:15 PM

the first adwcleaner
:

# AdwCleaner v2.306 - Logfile created 08/10/2013 at 08:19:20
# Updated 19/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Owner - GINGERMAE
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Owner\My Documents\Downloads\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xogka8c3.default-1374170468640\searchplugins\Babylon.xml
File Deleted : C:\WINDOWS\system32\roboot.exe
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\Owner\Application Data\BabSolution
Folder Deleted : C:\Documents and Settings\Owner\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\Owner\Application Data\DriverCure
Folder Deleted : C:\Documents and Settings\Owner\Application Data\DSite
Folder Deleted : C:\Program Files\OApps

***** [Registry] *****

Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\Software\systweak

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=B46B00142263A357&affID=119351&tsp=4969 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] = hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=B46B00142263A357&affID=119351&tsp=4969 --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (en-US)

File : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xogka8c3.default-1374170468640\prefs.js

C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xogka8c3.default-1374170468640\user.js ... Deleted !

[OK] File is clean.

-\\ Google Chrome v28.0.1500.95

File : C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [4251 octets] - [10/08/2013 08:17:49]
AdwCleaner[S1].txt - [4302 octets] - [10/08/2013 08:19:20]

########## EOF - C:\AdwCleaner[S1].txt - [4362 octets] ##########
 

 

 

 

 

the second one:

# AdwCleaner v2.306 - Logfile created 08/10/2013 at 08:19:20
# Updated 19/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Owner - GINGERMAE
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Owner\My Documents\Downloads\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xogka8c3.default-1374170468640\searchplugins\Babylon.xml
File Deleted : C:\WINDOWS\system32\roboot.exe
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\Owner\Application Data\BabSolution
Folder Deleted : C:\Documents and Settings\Owner\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\Owner\Application Data\DriverCure
Folder Deleted : C:\Documents and Settings\Owner\Application Data\DSite
Folder Deleted : C:\Program Files\OApps

***** [Registry] *****

Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\Software\systweak

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=B46B00142263A357&affID=119351&tsp=4969 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] = hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=B46B00142263A357&affID=119351&tsp=4969 --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (en-US)

File : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xogka8c3.default-1374170468640\prefs.js

C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\xogka8c3.default-1374170468640\user.js ... Deleted !

[OK] File is clean.

-\\ Google Chrome v28.0.1500.95

File : C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [4251 octets] - [10/08/2013 08:17:49]
AdwCleaner[S1].txt - [4302 octets] - [10/08/2013 08:19:20]

########## EOF - C:\AdwCleaner[S1].txt - [4362 octets] ##########
 



#6 P00HSTER

P00HSTER
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:58 PM

Posted 10 August 2013 - 01:17 PM

C:\Documents and Settings\Owner\My Documents\Downloads\HTML n setup files\mplayer_freely_d157223.exe    a variant of Win32/InstallIQ.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP308\A0061646.exe    a variant of Win32/Adware.AddLyrics.I application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP308\A0061722.dll    probably a variant of Win32/Adware.Yontoo.B application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP309\A0064925.exe    Win32/OpenCandy application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP324\A0076679.exe    a variant of Win32/Soft32Downloader.D application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP371\A0098425.dll    a variant of Win32/bProtector.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP371\A0098426.exe    a variant of Win32/bProtector.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP371\A0098427.exe    a variant of Win32/bProtector.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP371\A0098434.exe    a variant of Win32/Toolbar.DefaultTab.B application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP376\A0098458.dll    Win32/Toolbar.DefaultTab.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP376\A0098459.exe    Win32/Toolbar.DefaultTab.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP376\A0098460.exe    Win64/Toolbar.DefaultTab.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP376\A0098462.dll    Win32/Toolbar.DefaultTab.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP376\A0098463.dll    Win64/Toolbar.DefaultTab.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{310B096C-6C60-40A8-9612-04088CC23640}\RP376\A0098465.exe    Win32/Toolbar.DefaultTab.A application    cleaned by deleting - quarantined
 



#7 P00HSTER

P00HSTER
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:58 PM

Posted 10 August 2013 - 01:18 PM

Rkill 2.6.0 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 08/09/2013 07:23:08 AM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * C:\WINDOWS\System32\DLA\DLACTRLW.EXE (PID: 1896) [WD-HEUR]
 * C:\Documents and Settings\Owner\Application Data\DefaultTab\DefaultTab\DTUpdate.exe (PID: 476) [UP-HEUR]
 * C:\Documents and Settings\Owner\My Documents\Downloads\PC HELPERS & Security\RegSeeker\RegSeeker\RegSeeker.exe (PID: 2836) [UP-HEUR]

3 proccesses terminated!

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * Reparse Point/Junctions Found (Most likely legitimate)!

     * C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a => C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492 [Dir]

Checking Windows Service Integrity:

 * DHCP Client (Dhcp) is not Running.
   Startup Type set to: Automatic

 * System Restore Service (srservice) is not Running.
   Startup Type set to: Automatic

 * Security Center (wscsvc) is not Running.
   Startup Type set to: Automatic

 * Automatic Updates (wuauserv) is not Running.
   Startup Type set to: Automatic

Searching for Missing Digital Signatures:

 * C:\WINDOWS\System32\mspmsnsv.dll : 27,136 : 01/30/2009 08:33 PM : 051b1bdecd6dee18c771b5d5ec7f044d [NoSig]
 +-> C:\WINDOWS\$NtServicePackUninstall$\mspmsnsv.dll : 52,224 : 08/04/2004 08:00 AM : c086483e3dba8c1c0a687ec8d5b3d4c1 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll : 52,224 : 04/14/2008 06:42 AM : c7e39ea41233e9f5b86c8da3a9f1e4a8 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mspmsnsv.dll : 27,136 : 10/18/2006 10:47 PM : c51b4a5c05a5475708e3c81c7765b71d [Pos Repl]

Checking HOSTS File:

 * HOSTS file entries found:

  127.0.0.1       localhost

Program finished at: 08/09/2013 07:27:41 AM
Execution time: 0 hours(s), 4 minute(s), and 33 seconds(s)
 



#8 P00HSTER

P00HSTER
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:12:58 PM

Posted 10 August 2013 - 01:19 PM

I thank you in advance for your help



#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,082 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:01:58 PM

Posted 11 August 2013 - 07:56 PM

Ok, good and you're welcome. Lt's see if you can do these 2 and see how it is.



Please run chkdsk /r and sfc /scannow

Click on the Start orb startorb_zps06e1f985.png , type in cmd in the Search programs and files box. When cmd is seen in Programs right click on it, then click on Run as administrator.

You will see a screen similar to the one below.

Screenshot2.jpg


Type in chkdsk c:/r then press Enter.

You will receieve the message "CHKDSK cannot be run because it is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts? <Y/N>".

Type in Y and press Enter.

Restart your computer to start the scan.

This will take a while to run, please be patient and allow it to complete the scan.

The sfc /scannow command scans all protected system files and replaces corrupted and incorrect versions with correct Microsoft versions.

Click on the Start orb startorb_zps06e1f985.png, the type in cmd in the Search programs and files.

cmd will appear in Programs above, right click on it, then click on Run as administrator.

If you are prompted for an administrator password or for a confirmation, enter the password, or click Allow.

A page similar to the one below will open.

Screenshot2.jpg

Type in sfc /scannow and then press Enter to start the scan.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users